test: update license checks

scripts/test-licenses.js

@@ -77,10 +77,12 @@ const licenseReplacements = {
 // Specific packages to ignore, add a reason in a comment. Format: package-name@version.
 const ignoredPackages = [
   'spdx-license-ids@2.0.1',  // CC0 but it's content only (index.json, no code) and not distributed.
+  'spdx-license-ids@3.0.0',  // CC0 but it's content only (index.json, no code) and not distributed.
   'map-stream@0.1.0', // MIT, license but it's not listed in package.json.
   'xmldom@0.1.27', // LGPL,MIT but has a broken licenses array.
   'true-case-path@1.0.2', // Apache-2.0 but broken license in package.json
   'pako@1.0.6', // SPDX expression (MIT AND Zlib) in package.json
+  'sha.js@2.4.11', // SPDX expression (MIT AND BSD-3-Clause) in package.json
 
   'jsonify@0.0.0', // TODO(hansl): fix this. this is not an acceptable license, but is 8 deps down
                    // so hard to manage. In talk with owner and users to switch over.